by Krusty
Written in Visual Basic
Created in 2002
Made in Germany
|
Server:
c:\WINDOWS\VVUIJOE.EXE
size: 141 KB
port: 1037 TCP
startup:
HKLM\Software\Microsoft\Active Setup\Installed Components\{RTEMRSP-VHE-KGSOZ-ENJDG-TDTFHWTKNFFN} "StubPath"
Added:
c:\WINDOWS\winstart.bat
c:\WINDOWS\xqwrmthm.sys
MegaSecurity